Description
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Data Risk Manager | IBM / Data Risk Manager | 2.0.1 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.2 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.3 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.4 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.5 | affected |
| Data Risk Manager | IBM / Data Risk Manager | 2.0.6 | affected |